Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/J6Kzm9-BHVrTMueLm85flmGpBuc.roa
File: J6Kzm9-BHVrTMueLm85flmGpBuc.roa (raw, json)
Hash identifier: 9/2ACokdd6WeH0EpVJ7k0Vq4xCNM0q7ZPA1hEeNbMHI=
Subject key identifier: 27:A2:B3:9B:DF:81:1D:5A:D3:32:E7:8B:9B:CE:5F:96:61:A9:06:E7
Certificate issuer: /CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Certificate serial: 0194206841181EC349DD59E0ADA0DFF5C3A5
Authority key identifier: 8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/J6Kzm9-BHVrTMueLm85flmGpBuc.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13138
IP address blocks: 213.148.64.0/19 maxlen: 19
213.148.64.0/20 maxlen: 20
213.148.64.0/21 maxlen: 21
213.148.64.0/22 maxlen: 22
213.148.64.0/23 maxlen: 23
213.148.64.0/24 maxlen: 24
213.148.65.0/24 maxlen: 24
213.148.66.0/23 maxlen: 23
213.148.66.0/24 maxlen: 24
213.148.67.0/24 maxlen: 24
213.148.68.0/22 maxlen: 22
213.148.68.0/23 maxlen: 23
213.148.68.0/24 maxlen: 24
213.148.69.0/24 maxlen: 24
213.148.70.0/23 maxlen: 23
213.148.70.0/24 maxlen: 24
213.148.71.0/24 maxlen: 24
213.148.72.0/21 maxlen: 21
213.148.72.0/22 maxlen: 22
213.148.72.0/23 maxlen: 23
213.148.72.0/24 maxlen: 24
213.148.73.0/24 maxlen: 24
213.148.74.0/23 maxlen: 23
213.148.74.0/24 maxlen: 24
213.148.75.0/24 maxlen: 24
213.148.76.0/22 maxlen: 22
213.148.76.0/23 maxlen: 23
213.148.76.0/24 maxlen: 24
213.148.77.0/24 maxlen: 24
213.148.78.0/23 maxlen: 23
213.148.78.0/24 maxlen: 24
213.148.79.0/24 maxlen: 24
213.148.80.0/20 maxlen: 20
213.148.80.0/21 maxlen: 21
213.148.80.0/22 maxlen: 22
213.148.80.0/23 maxlen: 23
213.148.80.0/24 maxlen: 24
213.148.81.0/24 maxlen: 24
213.148.82.0/23 maxlen: 23
213.148.82.0/24 maxlen: 24
213.148.83.0/24 maxlen: 24
213.148.84.0/22 maxlen: 22
213.148.84.0/23 maxlen: 23
213.148.84.0/24 maxlen: 24
213.148.85.0/24 maxlen: 24
213.148.86.0/23 maxlen: 23
213.148.86.0/24 maxlen: 24
213.148.87.0/24 maxlen: 24
213.148.88.0/21 maxlen: 21
213.148.88.0/22 maxlen: 22
213.148.88.0/23 maxlen: 23
213.148.88.0/24 maxlen: 24
213.148.89.0/24 maxlen: 24
213.148.90.0/23 maxlen: 23
213.148.90.0/24 maxlen: 24
213.148.91.0/24 maxlen: 24
213.148.92.0/22 maxlen: 22
213.148.92.0/23 maxlen: 23
213.148.92.0/24 maxlen: 24
213.148.93.0/24 maxlen: 24
213.148.94.0/23 maxlen: 23
213.148.94.0/24 maxlen: 24
213.148.95.0/24 maxlen: 24
2a0d:5580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:41:18:1e:c3:49:dd:59:e0:ad:a0:df:f5:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2ec5b40c7172754255d626bf6c9213a3dafe6f
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27a2b39bdf811d5ad332e78b9bce5f9661a906e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:3f:07:b0:a7:44:78:4b:73:e4:78:bc:06:
16:a5:8f:6d:00:8c:71:55:a6:65:ac:f8:30:f9:a5:
a0:e7:5e:43:f4:f0:af:f9:19:c5:ca:93:51:bb:07:
43:91:d3:9d:4b:b6:56:05:69:f4:f9:d0:dc:29:7f:
5b:f2:3a:c7:cf:eb:47:fa:bc:da:80:6d:ef:49:f0:
f6:e5:70:84:d9:c0:09:9d:d5:72:50:4e:ac:19:38:
82:c7:e3:b6:67:57:6f:3f:7b:55:05:e1:7f:58:10:
e1:38:9c:54:a3:00:08:f1:3e:ee:81:0a:4a:4a:00:
07:12:11:68:42:44:8d:40:ed:90:b5:01:ad:48:ea:
ba:7e:9d:66:59:e3:4c:02:94:89:74:e7:fd:ca:8e:
f4:0f:7a:5c:a1:48:8d:be:eb:1d:d9:3e:19:9f:9b:
89:eb:79:d6:86:f9:b1:f2:35:be:42:5d:ab:a5:db:
7b:01:36:01:e4:c2:db:b6:18:5f:09:55:be:76:50:
f8:3a:49:e3:a2:d3:e1:69:98:ea:22:d5:6e:6b:c0:
b1:d0:c8:7c:58:62:ff:83:68:18:9c:fa:cd:66:c4:
49:f4:d0:6b:20:ba:28:27:4d:e4:18:e0:d1:8d:2a:
52:32:ef:76:9f:3f:09:a3:6c:8a:45:f7:10:f3:63:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:B3:9B:DF:81:1D:5A:D3:32:E7:8B:9B:CE:5F:96:61:A9:06:E7
X509v3 Authority Key Identifier:
keyid:8D:2E:C5:B4:0C:71:72:75:42:55:D6:26:BF:6C:92:13:A3:DA:FE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/J6Kzm9-BHVrTMueLm85flmGpBuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/75cfaa-59dc-4821-86b5-415cb5f0ba7e/1/jS7FtAxxcnVCVdYmv2ySE6Pa_m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.64.0/19
IPv6:
2a0d:5580::/29
Signature Algorithm: sha256WithRSAEncryption
06:71:d5:97:6d:77:9f:c0:cf:72:8d:71:c6:ea:64:d8:f2:47:
01:34:f9:ef:48:c7:c2:67:9b:6a:39:27:6b:c0:d8:f1:66:9e:
64:7c:3f:41:b0:37:45:be:d9:cd:a3:35:55:d9:9e:84:cf:2e:
17:5f:d7:3e:1d:f7:56:bf:5a:44:22:cb:ea:91:ca:8d:aa:02:
ca:29:b7:ae:d6:b9:a8:a6:17:52:e6:36:e6:a3:c2:50:15:23:
5f:ec:0c:36:83:ae:81:6f:f3:65:b1:b5:4f:83:cd:5f:d9:ac:
a7:9f:4b:b1:7a:59:3a:57:f0:7d:61:11:cf:cf:d9:b0:33:a0:
5e:0c:97:58:00:c4:90:c7:9e:53:61:52:da:ec:ab:45:77:f4:
ad:9c:1f:00:5f:d9:27:ca:11:54:b3:a0:a8:70:bc:01:62:0d:
56:5b:5d:12:5e:47:46:d2:76:de:51:aa:81:2d:65:de:f1:5d:
41:7d:24:b8:0f:f4:a3:8b:03:1b:fe:9b:be:24:51:25:f9:8c:
40:1c:3d:8e:07:d2:36:1c:d8:00:43:f5:df:c8:62:b6:4e:dd:
e5:72:61:75:70:68:24:c0:08:f4:ff:e0:7d:36:8c:e0:e6:67:
88:2d:f4:7b:5e:c8:9b:5d:65:be:7e:d5:8b:0c:e1:66:ec:d1:
67:87:f3:ae
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaEEYHsNJ3VngraDf9cOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMmVjNWI0MGM3MTcyNzU0MjU1ZDYyNmJmNmM5MjEzYTNk
YWZlNmYwHhcNMjUwMTAxMDU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2EyYjM5YmRmODExZDVhZDMzMmU3OGI5YmNlNWY5NjYxYTkwNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tw/B7CnRHhLc+R4vAYWpY9tAIxx
VaZlrPgw+aWg515D9PCv+RnFypNRuwdDkdOdS7ZWBWn0+dDcKX9b8jrHz+tH+rza
gG3vSfD25XCE2cAJndVyUE6sGTiCx+O2Z1dvP3tVBeF/WBDhOJxUowAI8T7ugQpK
SgAHEhFoQkSNQO2QtQGtSOq6fp1mWeNMApSJdOf9yo70D3pcoUiNvusd2T4Zn5uJ
63nWhvmx8jW+Ql2rpdt7ATYB5MLbthhfCVW+dlD4OknjotPhaZjqItVua8Cx0Mh8
WGL/g2gYnPrNZsRJ9NBrILooJ03kGODRjSpSMu92nz8Jo2yKRfcQ82OWvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCeis5vfgR1a0zLni5vOX5ZhqQbnMB8GA1UdIwQY
MBaAFI0uxbQMcXJ1QlXWJr9skhOj2v5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUt
NDE1Y2I1ZjBiYTdlLzEvSjZLem05LUJIVnJUTXVlTG04NWZsbUdwQnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83NWNmYWEtNTlkYy00ODIxLTg2YjUtNDE1Y2I1ZjBiYTdl
LzEvalM3RnRBeHhjblZDVmRZbXYyeVNFNlBhX204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1ZRAMA0E
AgACMAcDBQMqDVWAMA0GCSqGSIb3DQEBCwUAA4IBAQAGcdWXbXefwM9yjXHG6mTY
8kcBNPnvSMfCZ5tqOSdrwNjxZp5kfD9BsDdFvtnNozVV2Z6Ezy4XX9c+HfdWv1pE
IsvqkcqNqgLKKbeu1rmophdS5jbmo8JQFSNf7Aw2g66Bb/NlsbVPg81f2aynn0ux
elk6V/B9YRHPz9mwM6BeDJdYAMSQx55TYVLa7KtFd/StnB8AX9knyhFUs6CocLwB
Yg1WW10SXkdG0nbeUaqBLWXe8V1BfSS4D/SjiwMb/pu+JFEl+YxAHD2OB9I2HNgA
Q/XfyGK2Tt3lcmF1cGgkwAj0/+B9Nozg5meILfR7XsibXWW+ftWLDOFm7NFnh/Ou
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:29 2025 by rpki-client